My /etc/rkhunter.conf.local contains this line:
PORT_WHITELIST='* TCP:7000'
If I run rkhunter -c it appears that the star is being shell expanded:
root@willow / # rkhunter -c
Invalid entry specified in PORT_WHITELIST configuration option: bin
Invalid entry specified in PORT_WHITELIST configuration option: boot
...
Does anyone know a way around this? I am using rkhunter 1.4.2-5 and Ubuntu 16.04.